Overview
overview
7Static
static
3ARP.exe
windows10-2004-x64
1AggregatorHost.exe
windows10-2004-x64
1AppHostReg...er.exe
windows10-2004-x64
1AppInstall...te.exe
windows10-2004-x64
1Applicatio...st.exe
windows10-2004-x64
1ApplyTrustOffline.exe
windows10-2004-x64
1ApproveChi...st.exe
windows10-2004-x64
1AtBroker.exe
windows10-2004-x64
3AuthHost.exe
windows10-2004-x64
1AxInstUI.exe
windows10-2004-x64
1Background...st.exe
windows10-2004-x64
1BdeUISrv.exe
windows10-2004-x64
1BioIso.exe
windows10-2004-x64
1BitLockerD...on.exe
windows10-2004-x64
1BitLockerW...ev.exe
windows10-2004-x64
1ByteCodeGenerator.exe
windows10-2004-x64
1CIDiag.exe
windows10-2004-x64
1CameraSett...st.exe
windows10-2004-x64
1CastSrv.exe
windows10-2004-x64
1CertEnrollCtrl.exe
windows10-2004-x64
1CheckNetIsolation.exe
windows10-2004-x64
1CiTool.exe
windows10-2004-x64
1ClipRenew.exe
windows10-2004-x64
1ClipUp.exe
windows10-2004-x64
1CloudExper...er.exe
windows10-2004-x64
1CloudNotif...ns.exe
windows10-2004-x64
1CompMgmtLauncher.exe
windows10-2004-x64
7CompPkgSrv.exe
windows10-2004-x64
1CompatTelRunner.exe
windows10-2004-x64
1ComputerDefaults.exe
windows10-2004-x64
7Credential...er.exe
windows10-2004-x64
1Credential...er.exe
windows10-2004-x64
1Analysis
-
max time kernel
149s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240910-en -
resource tags
arch:x64arch:x86image:win10v2004-20240910-enlocale:en-usos:windows10-2004-x64system -
submitted
01-10-2024 19:29
Static task
static1
Behavioral task
behavioral1
Sample
ARP.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
AggregatorHost.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
AppHostRegistrationVerifier.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
AppInstallerBackgroundUpdate.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
ApplicationFrameHost.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral6
Sample
ApplyTrustOffline.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
ApproveChildRequest.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral8
Sample
AtBroker.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
AuthHost.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral10
Sample
AxInstUI.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
BackgroundTransferHost.exe
Resource
win10v2004-20240910-en
Behavioral task
behavioral12
Sample
BdeUISrv.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
BioIso.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral14
Sample
BitLockerDeviceEncryption.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
BitLockerWizardElev.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral16
Sample
ByteCodeGenerator.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
CIDiag.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral18
Sample
CameraSettingsUIHost.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
CastSrv.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral20
Sample
CertEnrollCtrl.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
CheckNetIsolation.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral22
Sample
CiTool.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
ClipRenew.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral24
Sample
ClipUp.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
CloudExperienceHostBroker.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral26
Sample
CloudNotifications.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
CompMgmtLauncher.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral28
Sample
CompPkgSrv.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
CompatTelRunner.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral30
Sample
ComputerDefaults.exe
Resource
win10v2004-20240910-en
Behavioral task
behavioral31
Sample
CredentialEnrollmentManager.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral32
Sample
CredentialUIBroker.exe
Resource
win10v2004-20240802-en
General
-
Target
ComputerDefaults.exe
-
Size
68KB
-
MD5
5c74f259f1e70356514b27eb518b8901
-
SHA1
c3e28513e92c7a9707046061d1808fa7a32948a8
-
SHA256
274aa1b7c137d52383e493e85e87dd8545beda2c465b251132f1f708b6d6cb50
-
SHA512
af69bae5d7802352aed4a4914ecd29aa9457aaab7d168a081dd291542a8b435f404acea85534a033c7a2f56f1e981a311014247ca2b78ff5fd75b3921b55a44c
-
SSDEEP
1536:CxR0J/hnOscbeUiyZURDoq4OZZZLlCIibC:rhIbFPWRD68wbC
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2629364133-3182087385-364449604-1000\Control Panel\International\Geo\Nation ComputerDefaults.exe